Sector

Education

14,974 domains tracked. 27.0% at DMARC enforcement (p=reject or p=quarantine), backed by 4,042 enforced domains.

Domains tracked
14K+
14,974
DMARC enforcement
27.0%
p=reject + p=quarantine
Avg posture score
40.3
of 100
A-grade domains
71
2 A+ · 69 A

Authentication posture

per protocol

DMARC

policy enforcement: 27.0%
reject
10.3%
quarantine
16.7%
none
30.8%
missing
42.2%

SPF

pass rate: 73.3%
pass
73.3%
warn
2.1%
fail
19.6%
not found
5.0%

DKIM

pass rate: 51.3%
pass
51.3%
warn
0.3%
fail
42.5%
not found
5.9%

MTA-STS

pass rate: 0.8%
pass
0.8%
warn
0.5%
fail
88.9%
not found
9.8%

TLS-RPT

pass rate: 1.8%
pass
1.8%
warn
14.0%
fail
74.4%
not found
9.8%

BIMI

pass rate: 0.5%
pass
0.5%
warn
0.2%
fail
89.6%
not found
9.8%

Top performers

20 of 14,974 tracked
#DomainScoreGrade
1rmu.edu97A+
2aber.ac.uk95A+
3chalkbeat.org94A
4newmanu.edu94A
5bathspa.ac.uk93A
6kaust.edu.sa93A
7usf.edu93A
8aud.edu92A
9chop.edu92A
10derby.ac.uk92A
11hult.edu92A
12italki.com92A
13clarkstate.edu91A
14classdojo.com91A
15nd.edu91A
16usbcali.edu.co91A
17anu.edu.au90A
18auckland.ac.nz90A
19bath.ac.uk90A
20deakin.edu.au90A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026